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1. Preliminary remarks. — The cipher alphabets of polyalphabetic substitution ciphers are 
most frequently secondary alphabets resulting from the juxtaposition, at various points of 
coincidence, of two basic sequences of letters usually termed primary components. 1 One of 
these components is designated the plain component, being the one in which the plain-text letter 
to be enciphered is sought ; the other component is designated the cipher component, being the 
one in which the cipher letter is sought, the cipher letter in the cipher component standing in 
some spatial relation with the plain-text letter in the plain component — usually opposite it as 
the two components are juxtaposed at the predetermined point of coincidence. 

When the plain component is the normal sequence and the cipher component is a mixed 
sequence, the complete solution and reconstruction of the secondary alphabets, as well as of the 
mixed primary cipher component, from a few values obtained by the application of the principles 
of frequency to the cipher text, is a very simple matter and the method to be followed in these 
processes can be found in various treatises. 8 In such a case the process is termed “ solution and 
reconstruction by the application of the principles of direct symmetry.” 

When, however, both components of a primary alphabet are unknown sequences which, by 
juxtaposition at various points of coincidence, are made to yield a series of secondary alphabets 
employed in polyalphabetic encipherment, the principles of direct symmetry can no longer be 
applied in an attempt to solve and reconstruct the primary components and the secondary 
alphabets, given a few values obtained as a result of cryptanalytic solution of fragments of the 
cipher text. This is because the letters of the cipher components of the secondary alphabets 
no longer show externally any symmetry of position when written beneath the letters of the 
plain component (usually the normal alphabet A B C . . . Z). 

If the matter be studied with care, however, an internal or indirect symmetry of position 
can be found, the application of the principles of which will very much facilitate the solution 
of many varied cases. In fact, it has been found in certain difficult cases that solution can 
be achieved only by a recourse to the principles of indirect symmetry. 

1 See Friedman, William F., Elements of Cryptanalysis, Signal Corps Training Pamphlet No. 3, 1924, 
pp. 34, 36. 

2 Friedman, W. F., loc. cit., pp. 53-63. Hitt, Parker. Manual for the Solution of Military Ciphers, For 
Leavenworth Press, 1916, p. 68. Givierge, M. Corns de Cryptographie, Paris, 1925, p. 107. 

( 1 ) 
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2. Simultaneous explanation of principles and application to a concrete case. — The case 
described below will serve not only to explain the principles of the method but will at the same 
time also show how the solution of a single rather difficult polyalphabetic substitution cipher was 
greatly facilitated by applying these principles. It is realized, of course, that the cryptogram 
could have been solved by the usual methods of frequency and long, patient experimentation. 
However, the method to be described was applied and very materially reduced the amount of 
time and labor actually requiredfor solution. 

3. The -cryptogram employed in the demonstration. — The problem herein described 
involved an actual cryptogram submitted for solution in connection with a cipher device 
having two concentric disks upon which the same random mixed alphabet appears, both 
alphabets progressing in the same direction. This was obtained from a study of the descriptive 
circular accompanying the cryptogram. By the usual process of factoring, it was determined 
that the cryptogram involved 10 alphabets. The message as arranged according to its period 
is shown in figure 1, in which all repetitions of two or more letters are indicated. 

The trigraphic frequency tables are given in figure 2. It will be seen that on account of 
the brevity of the message, considering the number of alphabets involved, the frequency tables 
do not yield many clues. By a very careful study of the repetitions, tentative individual 
determinations of values of cipher letters, as illustrated in figures 3, 4, 5, and 6, were made. 
These are given in sequence and in detail in order to show that there is nothing artificial or 
arbitraxy in the preliminary stages of analysis here set forth. 
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Trigraphic Frequency Tables 
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Initial Values from Assumptions 

12 3 s 

G C =E P ; K„=E p ; X 0 =E p ; and D 0 =E P , from frequency tables. 

3 4 5 4 5 6 9101 

UGD=THE; PCJ=THE; and SEG=THE, from study of repetitions. 
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Additional. Values from Assumptions (I) 



2 

Refer to line DD in figure 3 ; S« assumed to be N B . 

9 

Refer to line M in figure 3; A, assumed to be W p . 

9 10 1 3 3 4 6 

Then in lines C-D,A V K Z U G D is assumed to be WITH THE. 
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Additional Values from Assumptions (II) ■ 
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Figure 6 



Additional Values from Assumptions (III) 

4 S 8 

OPN — assume ING from repetition and frequency, 

0101 

HQZ — assume ING from repetition and frequency. 
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From the initial and subsequent tentative identifications Shown in figures 3, 4, 5, and 6, the 
values obtained were arranged in the form of the secondary alphabets shown in figure 7. 

Figure 7 

1 2 t 4 5 8 7 8 9 10 11 12 13 14 16 16 17 18 19 20 21 22 23 24 25 26 

0 ABCDEFGHIJKLMNOPQRSTUVWXYZ 




. G 0 
. C . 
N 0 . 




4. Fundamental theory. — In paragraph 47c of “Elements of Cryptanalysis” (see footnote 1, 
page 1), a method of reconstructing primary components from one of the secondary alphabets was 
given in detail. It is necessary that that method be fully understood before the following steps 
be studied. It was there shown that the primary component can be one of a series of 26 equiva- 
lent primary sequences, all of which will give exactly similar results so far a3 the secondary 
alphabets and the cryptographic text are concerned. It is not necessary that the identical or 
■original primary component employed in the cryptographing be reconstructed— any equivalent 
primary sequence will serve. The whole question is one of establishing & sequence of letters the 
interval between which is either equal to that in the original primary component or else is an exact 
constant multiple of the interval separating the letters in the original primary component. For 
example, suppose K P X N Q forms a sequence in the original primary component. Here the inter- 
val between K and P, P and X, X and N, N and Q is one; in an equivalent primary component, say 
the sequence K . . P . . X . . N . . Q, the interval between K and P is three, that between P and X also 
three, and so on; and the two sequences will yield the same secondary alphabets. So long as 
the interval between K and P, P and X, X and N, N and Q is a constant one, the sequence will 
yield the same secondary alphabets as do those of the original primary sequence. However, 
it is necessary that this interval be an odd number other than 13, as these are the only cases 
which will yield one unbroken sequence of 26 letters. 

Suppose a secondary alphabet to be as follows : 

Plain ABCDEFGHIJKLMNOPQRSTUVWXYZ 

Cipher X K N P 

We can say that the primary component contains the following sequences: 



These, when united by means of their co mm on letters, yield K P X N Q. 

Suppose we had also the following secondary alphabet: 

Plain ABCDEFGHIJKLMNOPQRSTUVWXYZ 

Cipher P X K N 




i 




12 

Here we get the sequences PN, XQ, KX, and NZ, which when united yield the two sequences KXQ 
and PNZ. 

By a comparison of the sequences K P X N Q, K X Q, and P N Z, we can establish the following: 

K P X N Q 

K . X - Q 

P . N . Z 

It follows that we can now add the letter Z to the sequence, making it K P X N Q Z. 

The reconstruction of a primary alphabet from one of the secondaries by the process given 
in “Elements of Cryptanalysis’* requires a complete or nearly complete secondary alphabet. 
This is at hand only after a cryptogram has been completely solved. But if we could employ 
several veiy scant or skeletonized secondary alphabets simultaneously with the analysis of the 
cryptogram we could then possibly build up a primary component from fewer data and thus 
solve the cryptogram much more rapidly than would otherwise be the case. Let us see how. 

Suppose we place into juxtaposition only the cipher components of the two secondary 
alphabets given above. Thus: 

- -1 2 3 4 5 6 7 3 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 26 26 

X.KN P.. 

’ P . . X K . N 

The sequences PX, XN, and KP result, which united yield KPXN as part of the primary sequence. 
It follows, therefore, that we can employ the cipher components oj secondary alphabets as sources 
of independent data to assist in building up the primary sequences. The usefulness of this 
point will become clearer subsequently. 

5. Application of principles. — Refer now to figure 7. Hereafter, in order to avoid all ambi- 
guity and for ease in reference, the position of a letter in figure 7 .will be indicated by coordinates 
in parentheses. Thus, N (6 — 7) refers to the letter N in line 6 and in column 7. 

Now, consider the following pairs of letters: 

. E (0 — 5) J (6— 5) 

G (0— 7) N (6— 7) 

{S atiS . f »Iii)} H0 + 0f '“ H0F 

(We are enabled to use the line marked zero in figure 7 since we have a mixed sequence 
sliding against itself.) 

The immediate results of this set of values will now be given. Having HOF as a sequence, 
with EJ as belonging to the same interval set, suppose we place HOF and EJ into juxtaposition 
as portions of sliding alphabets. Thus: j 

Plain text . . .HOF. . . 

Cipher . i ... E J . . . . 

When H P =E„, then 0 P =J C . 

Refer now to alphabet 10, figure 7, where it is seen that H P =E C . We can immediately insert 
the derived value , in the same alphabet, Qp=J c , and substitute in the cryptogram. 

Again, GN belongs to the same set of interval values as do EJ and HOF. Hence, by super- 
imposition: 
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Plain text HOF. . . 

Cipher . . . G N . . . . 

When H P =G C then O p =N„. Therefore, we can insert the value, in alphabet 4, 0 p =N o , and 
also substitute in the cryptogram. 

Furthermore, note the corroborations we find from this particular superimposition: 

H(0 — 8) G(0 — 7) 

0(6—8) N(6 — 7) 

This checks up the value in alphabet 6, G„=N e . 

Again superimpose HOF and GN: 

HOF 
G N 

Note this corroboration: 

0 (6— 8) G <4— 8) 

F (6 — 15) N (4—15) 

which has just been inserted in figure 7, as stated above. 

Again using HOF and EJ, but in a different superimposition, we have: 

...HOF.. 

..EJ.... 

Refer now to H (9 — 9) J (9 — 8). Directly under these letters we find V (10—9) E (10— 8). 
Therefore, we can add the V immediately before HOF, making the sequence V HOF. 

Now take V H 0 F and juxtapose it with E J, thus: 

V H 0 F 
E J 

i' ; 

Refer now to figure 7, and find the following: , 

V (10—9) E (10—8) 

H ( 9—9) J ( 9—8) 

0 ( 4—9) G ( 4—8) 

1 ( 0—9) H ( 0—8) 

From the value 0 G it follows that G can be set next to J in E J. Thus: 

V H 0 F 
E J G 

But we already have G N as a member of the same interval set as E J. Therefore, we now 
can combine E J, J G, and G N into one sequence, E J G N; then we have 

V H 0 F 
E J G N 



u 



Refer now to figure 7. 

V (0—22) 
? ( 1 — 22 ) 
? (2—22) 
? (3—22) 
? (5—22) 
? (6—22) 

The only values we can insert are: 

0 ( 1 — 22 ) 
H (6—22) 



E (0—5) 
G (1-5) 
K (2—5) 
X (3—5) 
D (5—5) 
J (6—5) 



G (1-5) 
J (6—5) 



This means that V p =0,, in alphabet 1 and that V p — H c in alphabet 6. There is one 0 o in the 
frequency table for alphabet 1 , and no H 0 in that for alphabet 6. The frequency table is, therefore 
corroborative insofar as these values are concerned. 

Further, taking E J G N and V H 0 F, superimpose them thus: 



E J G N 
V H 0 F 

Refer now to figure 7. 

E (0—5) H (0—8) 

G (1-5) ? (1—8) 

From the diagram of superimpositioh we can insert the value G (1 — 5) F (1 — 8), which gives 
us H P =F 0 in alphabet 1. 

Again, placing V H 0 F and E J G N into juxtaposition, we have: 

V H 0 F 
E J G N 



Refer to figure 7 and find the following: 

H (0— 8) G (4 — 8) 

A (0—1) E (4-1) 

This means that we can add A thus: 

A V H 0 F 
E J G N 

In the set we have also ? . 

E (0—5) ; G (1—5) 

G (0—7) Z (1—7). 

Then in the superimposition i 

E J G N 
E J G N 

we can add Z under G, making the sequence E J G N Z. 



Then taking 
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and referring to figure 7: 



A V H 0 F 
E J G N Z 



H (0—8) N (0—14) 

0 (6—8) ? (6—14) 



it will be seen that 0==Z from superimposition, and hence in alphabet 6, N P =Z 0 , an important 
new value, but occurring only once in the cryptogram. Has an error been made? The work 
so far seems too corroborative to think so. 

We have by no means exhausted the possibilities of the superimposition and sliding of the 
AVHOF and the EJGNZ sequences, but let us go on a little different trail this time. 



Then we have 

Now refer to the following: 



E (0—5) T (0—20) 

G (1—5) K (1—20) 

X (3—5) U (3—20) 

EJGNZ 
T . K 

9 

E (0— 5) K (2— 5) 

N (0—14) S (2—14) 



whereupon we can insert the value S: 

EJGNZ 
T . K . . S 



Consider all the values based upon the interval corresponding to JG: 



J (6—5) G (1— 5)->J (9— 8) G (4— 8) 

N (6—7) Z (1—7) H (9— 9) 0 (4— 9) 

S (9—20) P (4— 20)-»S (2—14) P (5—14) 

Z (2— 8) C (5— 8) 

K (2— 5) D (5— 5) 

Since J and G are sequent in the EJGNZ sequence, we can say that all the letters of the 
foregoing pairs are also sequent. Hence we have Z C, S P, and K D as new data. Therefore, 
we have E J G N Z C and T . K D . S P. 

From figure 7: 

T (0—20) P (4—20) 

A (0— 1) E (4— 1) 

H (0— 8) G (4— 8) 

I (0- 9) 0 (4— 9) 

1 2 3 4 6 6 

Now in the T . K D . S P sequence the interval between T and P is T P. 

Hence- the interval between A and E is 6 also. It follows therefore that the sequences 
AVHOF and E J G N Z C should be united thiis: 

1 2 3 4 5 6 

AVHOF. EJGNZC 



60343-35 2 



16 



Corroboration is found in the interval between H and G, which is six. The letter I oan be 
placed into position, from the relation I (0 — 9) 0 (4 — 9), thus: 



From figure 7: 



From the I . 



1 2 3 4 5 6 

I . . AVHOF . EJGNZC 



H (0— 8) Z (2— 8) 

E (0— 5) K (2— 5) 

N (0—14) S (2—14) 

U (0—21) F (2—21) 



AVHOF . EJGNZC sequence we can write 



H Z and likewise 

E K 

N . . S 

U F 



12345678 



Hence we can make the sequence 



I 

Then I 
and U I 



AVHOF 

AVHOF 

AVHOF 



1 2 3 4 5 6 7 8 

EJGNZC. . K 
EJGNZCT . KD 
EJGNZCT.KD 



S P 
S P 



1 2 ' 3 4 6 



7 8 



3 4 5 9 7 8 



Subsequent derivations can be indicated very briefly as follows: 



E (0—5) 
D (5—5) 



C (0—3) 
R (5—3) 



From 

we can write 
and 



1 2 
U I 



4 5 6 7 8 » 10 11 18 13 14 15 16 17 18 18 20 21 22 23 24 25 26 

.AVHOF. EJGNZCT. KD.SP. . . 

K . . ♦ • C 



1 2 3 4 5 



D 



making the sequence U I. .AVHOF. EJGNZCT. KD.SP 



. R 

4 5 



12345678 



10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 



1 2 

U I 

u . 



U (3—20) T (0—20) 

X (3— 5) E (O- 5) 

5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 

AVHOF. EJGNZCT. KD.SP. R. 

T 

E X 



From 

we can write 
and 

making the sequence U I. .AVHOF. EJGNZCT. KDXSP.R. 



1 2 3 4 5 6 7 8 9 10 11 12 



1 

u 



14 1 * 16 17 18 19 20 21 22 23 24 25 28 



From 

we can write 
and then 



E (0—5) G (1—5) 

B (0—2) W (1—2) 

E J G 
E . G 
3 . ff 
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There is only one place where B . W can fit, viz, at the end: 

1 2 3 4 5 6 7 8 9 10 11 12 13 14 13 1« 17 18 19 20 21 22 23 24 25 M 

UI . . AVHOF . EJGNZCT . KDXSPBRW 



Only four letters remain to be placed into the sequence L, M, Q, and Y. They were easily 
found by application of the primary alphabet to the message. Having the primary component 
almost fully constructed, decipherment of the cryptogram can be completed with speed and 
precision. The text is as follows: 

Figcee 8 
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6. General remarks. — It is to be stated that the sequence of steps described in this paper 
corresponds quite closely with that actually followed by the writer in solving the problem. It 
is also to be pointed out that this method can be used as a control in the early stages of analysis 
because it will allow the cryptanalyst to check assumptions for values. For example, the very 
first value derived by the writer in applying the principles of indirect symmetry to the problem 
herein described was H C =A P in alphabet 1. As a matter of fact he had been inclined toward 
this value, from a study of the frequency and combinations which H c showed, and when the 
indirect-symmetry method actually substantiated his tentative hypothesis he immediately pro- 
ceeded to substitute the value given. If he had assigned a different value to H c , or if he had 
assumed a letter other than H c for A p in that alphabet, the conclusion would immediately follow 
that either the assumed value for H c was erroneous, or that one of the values which led to the 
derivation of H„=A P by indirect symmetry was wrong. Thus, these principles aid not only in 
the derivation of new values mathematically, and without reference to the actual frequencies of 
letters, or to tentative hypotheses for plain-text values, but they also assist very materially in 
serving as a check upon the validity of the assumptions already made. 

Furthermore, while the writer has set forth in figure 7 a set of 30 values, before he began 
to reconstruct the primary component, this was done for purposes of clarity and brevity in 
exposition of the principles herein described. As a matter of fact, what he did was to watch 
very carefully, when inserting values in figure 7, to find the very first chance to employ the 
principles of indirect symmetry ; and just as soon as a value could be derived, he actually sub- 
stituted the value in the cryptographic text, not only to see that no impossible combinations 
were formed, but also in the expectation that further assumptions for values would suggest 
themselves, by the addition of the derived values to those previously assumed. Thus, the 
processes of reconstructing the primary component, and the finding of additional data for the 
reconstruction, proceed simultaneously in an ever widening circle. 

It is worthy of notice that the careful analysis of only a sum total of 30 values in figure 7 
results in the derivation of the entire table of secondary alphabets, 676 values in all. And while 
the description of the method, as is usually the case, seems long and tedious, in its actual appli- 
cation, the results are speedy, accurate, and gratifying in their corroborative effect upon the 
mental activity of the cryptanalyst. 

7. Concluding remarks. — The problem here used as an illustrative case is by no means one 
that most favorably presents the application and value of the method. The writer has applied 
it to other much more favorable cases. For example, suppose that in a cryptogram of 6 alphabets 
the equivalents of only THE in all 6 alphabets are fairly certain. As in the previous case, it 
is supposed that the secondary alphabets are obtained by sliding a mixed alphabet against 
itself^ Suppose the secondary alphabets to be as follows: 




Consider the following chain of derivatives: 



H (0— 8) 
T (0—20) 
E (0— 5) 



* 8 ) 

- 20 ) 

- 5)-»E (1—20) 
Q (i- 8) 
. B (1- 5) 



X (2—20) 
L (2— 8) 
C (2— 5)- 



>B (4—20) 
N (4— 5) 
P (4- 8) 



C (3—20) 
I (3- 5) 
V (3— 8)- 



-->P (5—20) 
0 (5— 8) 
X (5— 5) 



V (6—20) 
Z (6— 8) 
T (6— 5)- 



X (5— 5) T (6— 5)— >X (2—20) T (0—20) 

L (2— 8) H (0— 8) 

C (2— 5) E (0— 5)->C (3—20) E (1—20) 

V (3— 8) Q (1— 8) 
I (3— 5) B (1— 5) 

These pairs are manifestly all of the same interval, and therefore unions can be made imme- 
diately. The complete list is as follows: 



•EX 


QL 


HI 


LH 


HO 


BC 


OZ 


CE 


TP 


PV 


XT 


VQ 








IB 



Joining pairs by their common letters, we have 

NIBCEXTPVQLHOZ 

With this as a nucleus the cryptogram can be solved speedily and accurately. When it 
is realized that it is quite often that the cryptanalyst can assume THE’s rather readily, the value 
of this principle becomes apparent. When it is further realized that if a cryptogram has suffi- 
cient text to enable the THE’s to be found easily, it is usually also possible to assume values for 
two or three other high-frequency letters, it is clear that the entire primary component can be 
very rapidly reconstructed. 

The foregoing principles of indirect symmetry and the described method of reconstructing 
primary components were first used by the writer in 1919, in the solution of a much more difficult 












problem, and the facts in connection therewith are rather interesting. Credit for the original 
and independent discovery of the possibility and method of applying the principles of indirect 
symmetry is due Mr. Paul S. Burdick, formerly second lieutenant, Signal Corps, who was asso- 
ciated with the writer in the Cipher Department, Riverbank Laboratories, Geneva, HI., and 
the writer takes this opportunity of acknowledging his indebtedness to Mr. Burdick for the 
basic idea. 

As originally stated by Mr. Burdick, the method only contemplated the insertion of values 
in the table of secondary alphabets by derivation from indirect symmetry. The writer extended 
the principles leading to the reconstruction of the primary component, by adding the idea of 
using partial sequences as sliding alphabets, a procedure which adds very considerably to the 
method and in fact makes it a most useful instrument in the analysis of cryptograms of this type, 
and by demonstrating that with but slight modification the basic principles could also be ap- 
plied to the case where the primary components are not identical mixed sequences. A brief 
discussion of this point will be of interest. 

Not long after Mr. Burdick’s original contribution he presented the Writer with a set of 
cryptograms prepared according to a method devised by him and which he claimed were proof 
against cryptanalysis. 

The method of encipherment consisted in the use of two differently mixed primary sliding 
alphabets without a repeating key; each pair of plain-text letters served as the indicators for 
the juxtaposition of the sliding alphabets for the encipherment of the next pair of plain-text 

letters. The initial setting for a message was determined by prearrangement. For example, 

12 . 

given the two alphabets below, and the initial key indicators as XP, they would be juxtaposed 
as follows: 

(1) KIEQBVZYXUPAWJDNSGOMCFTLRH 

(2) HERILDQYPKGXZOBSJVATMFWUCN 

Suppose the word WHEN is to be enciphered. The plain-text pair, WH, would be enciphered 
on alternate alphabets. Thus, W D in (1)=Z C , and H p in (2)=K 0 . Hence WH=ZK. 

The alphabets are then juxtaposed according to the key letters WH, thus: 

(1) KIEQBVZYXUPAWJDNSGOMCFTLRH 

(2) BSJVATMFWUCNHERILDQ'YPKGXZO 

The next pair of plain-text letters, EN, is enciphered thus: E p in (1)=J„; N p in (2)=A 0 . 
Hence the word WHEN becomes ZKJA. 

It is apparent that cryptograms enciphered in such a manner show no periodicity; that all 
possible secondary alphabets may be used in one and the same cryptogram; and that there are 
really 52 secondary alphabets instead of the usual number, 26, though, of course, the 52 sec- 
ondaries consist of two sets of 26 each, which are interrelated in the manner of enciphering- 
deciphering alphabets. 

A set of fifty test messages, each 25 letters in length and beginning at the same initial 
enciphering juxtaposition, was submitted by Mr. Burdick. By superimposing the messages 
the writer solved them and completely reconstructed both basic alphabets, by applying and 
extending the principles oj indirect symmetry of position that were first discovered by Mr. Burdick 
himself! It is not often that a cryptanalyst unknowingly discovers the very weapon that deals 
the deathblow to his own brain-child! The steps in that solution can be briefly indicated. The 
attack was begun, of course, by superimposing the test messages and making an assault upon 
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the first few col umns by using the simple principles of analysis based upon frequency and repe- 
titions. A few values were tentatively assigned and the writer immediately decided to attempt 
to apply the principles of indirect symmetry of position. He realized, naturally, that because 
the primary components were dissimilar the principles would have to be modified somewhat, 
and he set out to uncover the necessary modification. It was found to be quite simple and 
consisted in restricting the field for the derivation of values for the cipher component to that 
portion of the table of secondary alphabet equivalents which is below the zero line. For exam- 
ple, if figure 9 applied to a case of dissimilar mixed primary components, we could not consider 
all the letters in columns 5 and 20 as belonging to the same interval in both primary components. 
Only those below the zero line would belong to the same interval in the cipher component. 
Although the pairs E (0-5) T (0-20), B (1-5) E (1-20), and N (4-5) B (4-20) are of similar 
intervals, the E (0-5) T (0-20) would pertain to the primary plain component, the B (1-5) E 
(1-20) and the N (4-5) B (4-20) would pertain to the primary cipher component, so that al- 
though we could construct the sequence NBE as applicable to the cipher component, it would 
be incorrect to add the T to make the sequence NBET. By restricting the selection of letters 
to those below the zero line in the case of dissimilar primary components, we can reconstruct 
the cipher component; having the latter, the plain component can then be reconstructed quite 
readily. For example, suppose in figure 9 that the completed cipher component places the 
letter N in position 1-1, i.e., directly under A in the zero line. Then we could say that since 
NBE forms a sequence in the cipher component, the chain ETA forms a sequence in the plain 
component. Thus, continuing in this manner the entire (equivalent primary) component may 
be reconstructed. 
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